Known vulnerabilities in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC)

Software CPE: cpe:2.3:a:cisco_systems:cisco_firepower_management_center:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) is affected by 160 known vulnerabilities: 2 critical, 19 high, 42 medium, 97 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150677 - Improper Certificate Validation
CVE-2026-20323
CWE-295 Medium
No
No
7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2 17.09.2026 SB20260917231
#VU150676 - Uncontrolled Memory Allocation
CVE-2026-20295
CWE-789 Medium
No
No
7.0.10, 7.2.12, 7.4.7, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150671 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-20344
CWE-89 Medium
No
No
7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150670 - Missing Authentication for Critical Function
CVE-2026-20343
CWE-306 Medium
No
No
7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150669 - Authorization Bypass Through User-Controlled Key
CVE-2026-20342
CWE-639 Medium
No
No
7.0.10, 7.2.12, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150656 - Deserialization of Untrusted Data
CVE-2026-20341
CWE-502 Low
No
No
7.0.10, 7.2.12, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150653 - Deserialization of Untrusted Data
CVE-2026-20340
CWE-502 Medium
No
No
7.0.10, 7.2.12, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150652 - Missing Authorization
CVE-2026-20324
CWE-862 Medium
No
No
7.0.10, 7.2.12, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150533 - Deserialization of Untrusted Data
CVE-2026-20242
CWE-502 High
No
No
7.0.10, 7.2.12, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150523 - Improper Authorization
CVE-2026-76420
CWE-285 High
No
No
7.0.10, 7.2.12, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150517 - Improper Restriction of Security Token Assignment
CVE-2026-76413
CWE-1259 High
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2 17.09.2026 SB20260917231
#VU150516 - Permissions, Privileges, and Access Controls
CVE-2026-76412
CWE-264 Medium
No
No
7.7.13 17.09.2026 SB20260917231
#VU140037 - Use of Hard-coded Password
CVE-2026-20316
CWE-259 High
No
Exploited
7.0.9.1-3, 7.2.11.1-4, 7.4.7.1-3, 7.6.5.1-2, 7.7.12.1-2, 10.0.1.1-2 29.07.2026 SB2026072974
#VU123654 - Improper Privilege Management
CVE-2026-20044
CWE-269 Low
No
No
7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 09.03.2026 SB2026030964
#VU123617 - Deserialization of Untrusted Data
CVE-2026-20131
CWE-502 Critical
No
Exploited
7.0.9, 7.2.11, 7.4.6, 7.6.5, 7.7.12, 10.0.1 06.03.2026 SB2026030636
#VU123552 - Error Handling
CVE-2026-20068
CWE-388 Medium
No
No
7.2.11, 7.4.4, 7.6.4, 7.7.11 04.03.2026 SB2026030501
#VU123551 - Error Handling
CVE-2026-20067
CWE-388 Medium
No
No
7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 04.03.2026 SB2026030501
#VU123550 - Improper input validation
CVE-2026-20066
CWE-20 Medium
No
No
7.4.4, 7.6.4, 7.7.11 04.03.2026 SB2026030501
#VU123549 - Improper Initialization
CVE-2026-20065
CWE-665 Medium
No
No
7.0.9, 7.2.11, 7.4.3, 7.6.1 04.03.2026 SB2026030502
#VU123548 - Improper input validation
CVE-2026-20005
CWE-20 Medium
No
No
7.6.4, 7.7.11 04.03.2026 SB2026030501


Showing elements 1 - 20 out of 160